{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-107290", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-10-07T15:53:23.586Z", "datePublished": "2026-10-08T16:09:04.272Z", "dateUpdated": "2026-10-09T15:15:26.958Z"}, "containers": {"cna": {"title": "Pydantic AI: Event loop blocked by quadratic title extraction in `web_fetch`", "problemTypes": [{"descriptions": [{"cweId": "CWE-1333", "lang": "en", "description": "CWE-1333: Inefficient Regular Expression Complexity", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-fpf4-vwcp-v4hp", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-fpf4-vwcp-v4hp"}, {"name": "https://github.com/pydantic/pydantic-ai/pull/8397", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/pull/8397"}, {"name": "https://github.com/pydantic/pydantic-ai/pull/8399", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/pull/8399"}, {"name": "https://github.com/pydantic/pydantic-ai/pull/8418", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/pull/8418"}, {"name": "https://github.com/pydantic/pydantic-ai/pull/84332", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/pull/84332"}, {"name": "https://github.com/pydantic/pydantic-ai/pull/8434", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/pull/8434"}, {"name": "https://github.com/pydantic/pydantic-ai/commit/2faa6181d8a17d83bc9516d035c5270db8730fa0", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/commit/2faa6181d8a17d83bc9516d035c5270db8730fa0"}, {"name": "https://github.com/pydantic/pydantic-ai/commit/9cdc952e4c3319e85a3e04f2de49fbbb765bd38b", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/commit/9cdc952e4c3319e85a3e04f2de49fbbb765bd38b"}, {"name": "https://github.com/pydantic/pydantic-ai/commit/a93ea5226be1e93ae13131ae3f22287190411389", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/commit/a93ea5226be1e93ae13131ae3f22287190411389"}, {"name": "https://github.com/pydantic/pydantic-ai/commit/c3fd1cc1f15fdbf750d78e4e3ec1e8b4d6a3d920", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/commit/c3fd1cc1f15fdbf750d78e4e3ec1e8b4d6a3d920"}, {"name": "https://github.com/pydantic/pydantic-ai/commit/fb92ccfc3ca2735dab877e2ed73856681bf72ad1", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/commit/fb92ccfc3ca2735dab877e2ed73856681bf72ad1"}, {"name": "https://github.com/pydantic/pydantic-ai/releases/tag/v1.107.6", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/releases/tag/v1.107.6"}, {"name": "https://github.com/pydantic/pydantic-ai/releases/tag/v2.44.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/pydantic/pydantic-ai/releases/tag/v2.44.0"}], "affected": [{"vendor": "pydantic", "product": "pydantic-ai", "versions": [{"version": ">= 1.77.0, < 1.107.6", "status": "affected"}, {"version": ">= 2.0.0b1, < 2.44.0", "status": "affected"}]}, {"vendor": "pydantic", "product": "pydantic-ai-slim", "versions": [{"version": ">= 1.77.0, < 1.107.6", "status": "affected"}, {"version": ">= 2.0.0b1, < 2.44.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-10-08T16:09:04.272Z"}, "descriptions": [{"lang": "en", "value": "Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local web_fetch_tool and the WebFetch local fallback process server-controlled responses with quadratic title extraction, whitespace normalization, and ordered-list numbering. An attacker-controlled page of modest size can therefore block the event loop for an extended period, stalling other agent runs and requests, while unsupported codecs or excessive HTML or JSON nesting can abort an individual run. This issue is fixed in versions 1.107.6 and 2.44.0."}], "source": {"advisory": "GHSA-fpf4-vwcp-v4hp", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-08T20:23:20.403829Z", "id": "CVE-2026-107290", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-09T15:15:26.958Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-107290", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-08T20:23:20.403829Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-08T20:23:21.178Z"}}], "cna": {"title": "Pydantic AI: Event loop blocked by quadratic title extraction in `web_fetch`", "source": {"advisory": "GHSA-fpf4-vwcp-v4hp", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "pydantic", "product": "pydantic-ai", "versions": [{"status": "affected", "version": ">= 1.77.0, < 1.107.6"}, {"status": "affected", "version": ">= 2.0.0b1, < 2.44.0"}]}, {"vendor": "pydantic", "product": "pydantic-ai-slim", "versions": [{"status": "affected", "version": ">= 1.77.0, < 1.107.6"}, {"status": "affected", "version": ">= 2.0.0b1, < 2.44.0"}]}], "references": [{"url": "https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-fpf4-vwcp-v4hp", "name": "https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-fpf4-vwcp-v4hp", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/pydantic/pydantic-ai/pull/8397", "name": "https://github.com/pydantic/pydantic-ai/pull/8397", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/pydantic/pydantic-ai/pull/8399", "name": "https://github.com/pydantic/pydantic-ai/pull/8399", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/pydantic/pydantic-ai/pull/8418", "name": "https://github.com/pydantic/pydantic-ai/pull/8418", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/pydantic/pydantic-ai/pull/84332", "name": "https://github.com/pydantic/pydantic-ai/pull/84332", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/pydantic/pydantic-ai/pull/8434", "name": "https://github.com/pydantic/pydantic-ai/pull/8434", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/pydantic/pydantic-ai/commit/2faa6181d8a17d83bc9516d035c5270db8730fa0", "name": "https://github.com/pydantic/pydantic-ai/commit/2faa6181d8a17d83bc9516d035c5270db8730fa0", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/pydantic/pydantic-ai/commit/9cdc952e4c3319e85a3e04f2de49fbbb765bd38b", "name": "https://github.com/pydantic/pydantic-ai/commit/9cdc952e4c3319e85a3e04f2de49fbbb765bd38b", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/pydantic/pydantic-ai/commit/a93ea5226be1e93ae13131ae3f22287190411389", "name": "https://github.com/pydantic/pydantic-ai/commit/a93ea5226be1e93ae13131ae3f22287190411389", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/pydantic/pydantic-ai/commit/c3fd1cc1f15fdbf750d78e4e3ec1e8b4d6a3d920", "name": "https://github.com/pydantic/pydantic-ai/commit/c3fd1cc1f15fdbf750d78e4e3ec1e8b4d6a3d920", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/pydantic/pydantic-ai/commit/fb92ccfc3ca2735dab877e2ed73856681bf72ad1", "name": "https://github.com/pydantic/pydantic-ai/commit/fb92ccfc3ca2735dab877e2ed73856681bf72ad1", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/pydantic/pydantic-ai/releases/tag/v1.107.6", "name": "https://github.com/pydantic/pydantic-ai/releases/tag/v1.107.6", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/pydantic/pydantic-ai/releases/tag/v2.44.0", "name": "https://github.com/pydantic/pydantic-ai/releases/tag/v2.44.0", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local web_fetch_tool and the WebFetch local fallback process server-controlled responses with quadratic title extraction, whitespace normalization, and ordered-list numbering. An attacker-controlled page of modest size can therefore block the event loop for an extended period, stalling other agent runs and requests, while unsupported codecs or excessive HTML or JSON nesting can abort an individual run. This issue is fixed in versions 1.107.6 and 2.44.0."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1333", "description": "CWE-1333: Inefficient Regular Expression Complexity"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-10-08T16:09:04.272Z"}}}, "cveMetadata": {"cveId": "CVE-2026-107290", "state": "PUBLISHED", "dateUpdated": "2026-10-09T15:15:26.958Z", "dateReserved": "2026-10-07T15:53:23.586Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-10-08T16:09:04.272Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "pydantic-ai", "vendor": "pydantic", "versions": [{"status": "affected", "version": ">= 1.77.0, < 1.107.6"}, {"status": "affected", "version": ">= 2.0.0b1, < 2.44.0"}]}, {"product": "pydantic-ai-slim", "vendor": "pydantic", "versions": [{"status": "affected", "version": ">= 1.77.0, < 1.107.6"}, {"status": "affected", "version": ">= 2.0.0b1, < 2.44.0"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local web_fetch_tool and the WebFetch local fallback process server-controlled responses with quadratic title extraction, whitespace normalization, and ordered-list numbering. An attacker-controlled page of modest size can therefore block the event loop for an extended period, stalling other agent runs and requests, while unsupported codecs or excessive HTML or JSON nesting can abort an individual run. This issue is fixed in versions 1.107.6 and 2.44.0."}], "id": "CVE-2026-107290", "lastModified": "2026-10-09T16:17:21.800", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-107290", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-10-08T20:23:20.403829Z", "version": "2.0.3"}}]}, "published": "2026-10-08T17:17:14.413", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/pydantic/pydantic-ai/commit/2faa6181d8a17d83bc9516d035c5270db8730fa0"}, {"source": "security-advisories@github.com", "url": "https://github.com/pydantic/pydantic-ai/commit/9cdc952e4c3319e85a3e04f2de49fbbb765bd38b"}, {"source": "security-advisories@github.com", "url": "https://github.com/pydantic/pydantic-ai/commit/a93ea5226be1e93ae13131ae3f22287190411389"}, {"source": "security-advisories@github.com", "url": "https://github.com/pydantic/pydantic-ai/commit/c3fd1cc1f15fdbf750d78e4e3ec1e8b4d6a3d920"}, {"source": "security-advisories@github.com", "url": "https://github.com/pydantic/pydantic-ai/commit/fb92ccfc3ca2735dab877e2ed73856681bf72ad1"}, {"source": "security-advisories@github.com", "url": "https://github.com/pydantic/pydantic-ai/pull/8397"}, {"source": "security-advisories@github.com", "url": "https://github.com/pydantic/pydantic-ai/pull/8399"}, {"source": "security-advisories@github.com", "url": "https://github.com/pydantic/pydantic-ai/pull/8418"}, {"source": "security-advisories@github.com", "url": "https://github.com/pydantic/pydantic-ai/pull/84332"}, {"source": "security-advisories@github.com", "url": "https://github.com/pydantic/pydantic-ai/pull/8434"}, {"source": "security-advisories@github.com", "url": "https://github.com/pydantic/pydantic-ai/releases/tag/v1.107.6"}, {"source": "security-advisories@github.com", "url": "https://github.com/pydantic/pydantic-ai/releases/tag/v2.44.0"}, {"source": "security-advisories@github.com", "url": "https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-fpf4-vwcp-v4hp"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Undergoing Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-1333"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{"bugzilla": {"description": "pydantic-ai: pydantic-ai: Denial of Service via inefficient web response parsing", "id": "2548054", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548054"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-1322", "details": ["A flaw was found in pydantic-ai. An inefficient content parsing mechanism in the web fetching component allows a remote attacker serving a crafted web page to trigger a Denial of Service (DoS). By providing specially structured or deeply nested content, the attacker can block the application's event loop or abort active tasks, stalling other requests and agent runs."], "name": "CVE-2026-107290", "package_state": [{"cpe": "cpe:/a:redhat:lightspeed_core", "fix_state": "Fix deferred", "package_name": "lightspeed-core/lightspeed-stack-rhel9", "product_name": "Lightspeed Core"}, {"cpe": "cpe:/a:redhat:enterprise_linux_ai:3", "fix_state": "Fix deferred", "package_name": "rhelai3/bootc-cuda-rhel9", "product_name": "Red Hat Enterprise Linux AI (RHEL AI) 3"}, {"cpe": "cpe:/a:redhat:enterprise_linux_ai:3", "fix_state": "Fix deferred", "package_name": "rhelai3/bootc-gaudi-rhel9", "product_name": "Red Hat Enterprise Linux AI (RHEL AI) 3"}, {"cpe": "cpe:/a:redhat:enterprise_linux_ai:3", "fix_state": "Fix deferred", "package_name": "rhelai3/bootc-rocm-rhel9", "product_name": "Red Hat Enterprise Linux AI (RHEL AI) 3"}, {"cpe": "cpe:/a:redhat:enterprise_linux_ai:3", "fix_state": "Fix deferred", "package_name": "rhelai3/disk-image-cuda-rhel9", "product_name": "Red Hat Enterprise Linux AI (RHEL AI) 3"}], "public_date": "2026-10-08T16:09:04Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-107290\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-107290\nhttps://github.com/pydantic/pydantic-ai/commit/2faa6181d8a17d83bc9516d035c5270db8730fa0\nhttps://github.com/pydantic/pydantic-ai/commit/9cdc952e4c3319e85a3e04f2de49fbbb765bd38b\nhttps://github.com/pydantic/pydantic-ai/commit/a93ea5226be1e93ae13131ae3f22287190411389\nhttps://github.com/pydantic/pydantic-ai/commit/c3fd1cc1f15fdbf750d78e4e3ec1e8b4d6a3d920\nhttps://github.com/pydantic/pydantic-ai/commit/fb92ccfc3ca2735dab877e2ed73856681bf72ad1\nhttps://github.com/pydantic/pydantic-ai/pull/8397\nhttps://github.com/pydantic/pydantic-ai/pull/8399\nhttps://github.com/pydantic/pydantic-ai/pull/8418\nhttps://github.com/pydantic/pydantic-ai/pull/84332\nhttps://github.com/pydantic/pydantic-ai/pull/8434\nhttps://github.com/pydantic/pydantic-ai/releases/tag/v1.107.6\nhttps://github.com/pydantic/pydantic-ai/releases/tag/v2.44.0\nhttps://github.com/pydantic/pydantic-ai/security/advisories/GHSA-fpf4-vwcp-v4hp"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[1.77.0,1.107.6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2.0.0b1,2.44.0)"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "pydantic-ai", "source": "cna", "vendor": "pydantic"}, "product": "pydantic-ai", "vendor": "pydantic"}], "created": "2026-10-08T18:00:18.918914+00:00", "updated": "2026-10-09T03:15:15.733334+00:00", "vendors": ["pydantic", "pydantic$PRODUCT$pydantic-ai"]}